When an end user clicks on “Check for Updates” and there is a new version of the application (which deploys a helm chart) available, at what point does KOTS check access to the images referenced inside the chart?
The image references are checked after the “base” files are rendered. The base is rendered when update is downloaded. It is immutable after that.